Here are some useful links about running and tuning Wazuh:
https://laskowski-tech.com/2019/10/22/emotet-and-analysis-of-ttps-part-ii-for-the-watch/
https://wazuh.com/blog/emotet-malware-detection/
https://medium.com/@Gurulhu/tips-for-setting-up-a-wazuh-cluster-f05665023c10